Cybersecurity Principles & Protocols Flashcards

A help desk technician is given access only to password reset functions, not full domain admin rights. Which principle is applied?

Answer: Least privilege

Least privilege grants only the minimum access needed to perform a job.

A company requires one employee to create vendor payments and a different employee to approve them. Which principle is this?

Answer: Separation of duties

Separation of duties splits critical tasks so no single person can commit fraud alone.

A military system grants access by comparing a user's clearance level to classification labels on data. Which access control model is this?

Answer: Mandatory Access Control

MAC enforces access with system-assigned labels and clearances that users cannot change.

An organization assigns permissions to groups such as 'Nurse' and 'Billing Clerk' rather than to individual users. Which model is in use?

Answer: Role-Based Access Control

RBAC ties permissions to job roles, and users gain access by being assigned to a role.

A network uses a perimeter firewall, an IDS, endpoint antivirus, and MFA together. Which security principle does this show?

Answer: Defense in depth

Defense in depth layers multiple independent controls so one failure does not expose the system.

A firewall ACL has no rule matching an incoming packet. What should a securely configured firewall do?

Answer: Deny the packet by implicit deny

Secure ACLs end with an implicit deny, so anything not explicitly allowed is blocked.

Which statement best describes the Zero Trust security model?

Answer: Every access request is verified regardless of network location

Zero Trust assumes no implicit trust and continuously verifies identity, device, and context for every request.